{
  "docId": "019dd923-5de0-76bd-a16a-5ae74afc8cbc",
  "docSlug": "70414404d6257472",
  "documentTitle": "IIF/McKinsey Cyber Resilience Survey",
  "authorId": "McKinsey",
  "authorName": "McKinsey",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.294,
  "pageNumber": 12,
  "pageCount": 24,
  "prevPage": 11,
  "nextPage": 13,
  "slideType": "diagnosis",
  "function": "diagnose",
  "density": "dense",
  "nDataPoints": 6,
  "notes": "The chart highlights a critical vulnerability management gap in cyber resilience.",
  "elementsJson": [
    "headline_text",
    "bar_chart_vertical",
    "callout_box"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5de0-76bd-a16a-5ae74afc8cbc/12",
  "deckHref": "/decks/019dd923-5de0-76bd-a16a-5ae74afc8cbc",
  "deckJsonHref": "/decks/019dd923-5de0-76bd-a16a-5ae74afc8cbc.json",
  "deckAnchorHref": "/decks/019dd923-5de0-76bd-a16a-5ae74afc8cbc#slide-12",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "Chart shows 37% of companies said it takes more than 3 months to remediate a vulnerability.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-2e35-763d-8382-015f74697dd7",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.35,
        "w": 0.35,
        "x": 0.2,
        "y": 0.43
      },
      "kind": "chart",
      "text": "Average time to remediate vulnerabilities once they have been detected",
      "attrs": null,
      "subkind": "bar-vertical",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "016b8d8c-a9d3-45c0-bd09-0c24f216cdff",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "metric",
      "text": "Average time to remediate vulnerabilities: 37%",
      "attrs": null,
      "subkind": "primary",
      "toolName": "Quantification",
      "toolSlug": "quantification",
      "confidence": null,
      "componentId": "019dd952-2e35-763d-8382-07f21330b026",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.3,
        "w": 0.3,
        "x": 0.63,
        "y": 0.49
      },
      "kind": "paragraph",
      "text": "Chart shows 37% of companies said it takes more than 3 months to remediate a vulnerability. Among additional findings, 30% of companies said they do not provide technology and risk leaders with reporting and decision support on the vulnerability landscape. And, 52% of companies said they do not assess, document, and aggregate non-remediated vulnerabilities as part of enterprise risk management. This gives hackers time to exploit gaps in the environment. Lack of visibility across the vulnerability landscape impedes firms from accurately reporting on risks.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "9cf9eebd-ea49-40dc-8da2-d9204da48e11",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.02,
        "w": 0.2,
        "x": 0.2,
        "y": 0.95
      },
      "kind": "source-note",
      "text": "IIF/McKinsey Cyber Resilience Survey",
      "attrs": null,
      "subkind": null,
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "1e9d4e50-77e1-49d9-b82d-25fe995b90a0",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.45,
        "x": 0.34,
        "y": 0.145
      },
      "kind": "title",
      "text": "Long lead-times to remediate vulnerabilities also increase risk",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "49f0fbe2-1657-479a-b117-cf7e4c7cc8b7",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "Chart Selection Guide",
      "slug": "chart-selection-guide",
      "agent": "Designer",
      "layer": "slide",
      "matchId": "efcd70a0-0511-4683-b7dd-313506e87f1b",
      "evidence": "The use of a bar chart to display average time to remediate vulnerabilities",
      "confidence": 0.7
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 12,
      "from": 10,
      "beatId": "c6743ea3-1d9e-46a0-bcc3-0ee93dba6896",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Problem & Complication",
      "beatSlug": "consultants-gambit-problem-complication",
      "evidence": "The document highlights the challenges and weaknesses in current cyber resilience measures",
      "position": 1,
      "confidence": 0.8,
      "parentBeatName": "Complication",
      "parentBeatSlug": "complication"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}